I am surprised at the moderate level of ire at the perpetrators in the comments.
I know, yes, that the systems should be better locked down. But that doesn't justify people just shrugging and saying "Well, what do you expect?"
By their own admission, they are just trying to break any systems they can get into, and asking for significant amounts of money to repair the damage they have caused. They seem almost upset that no-one is talking to them. They are loathsome blackmailing scum of the earth, and I for one would like to see them captured and put into jail for a very long time.